Last updated: 12 January 2026
1. Who we are
This website, jollyjunctioncottages.makeup (the "Site"), is operated by Jolly Junction Editorial SRL, a private limited company registered in Belgium under company number BE 0784.512.369, with its registered office at Rue des Minimes 41, 1000 Brussels, Belgium ("we", "us", "our"). We are the data controller for personal data processed through the Site, as defined by Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
The Site is an independent editorial catalogue of luxury hotels in Brussels. We do not sell accommodation, process reservations or take payments. When you click a "Visit Official Website", "Book Direct" or "Check Hotel" button, you leave our Site and any personal data you provide to the hotel is processed under that hotel's own privacy policy.
2. Data we collect
2.1 Data you provide
When you use our contact form or email us, we collect your name, email address, the subject of your enquiry, the content of your message and any additional information you choose to share. We ask you not to send sensitive personal data, such as health information or payment card details, through the contact form.
2.2 Data collected automatically
When you browse the Site, our hosting infrastructure automatically records technical information, including your IP address (truncated where analytics are enabled), browser type and version, operating system, referring URL, pages viewed, date and time of access and approximate location derived from the IP address at country or city level. Where you consent to analytics cookies, we also collect aggregated information on how visitors interact with pages, such as scroll depth and which outbound hotel links are clicked.
2.3 Data we do not collect
We do not collect passport details, travel dates, payment information or booking references, because we never handle reservations.
3. How and why we use your data
- Responding to enquiries — to answer messages sent through the contact form or by email. Legal basis: our legitimate interest in corresponding with readers (Art. 6(1)(f) GDPR) or steps prior to entering a contract (Art. 6(1)(b)).
- Operating and securing the Site — to deliver pages, prevent abuse and diagnose faults. Legal basis: legitimate interests (Art. 6(1)(f)).
- Analytics — to understand which content is useful and improve the catalogue. Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.
- Legal compliance — to meet accounting, tax and regulatory obligations. Legal basis: legal obligation (Art. 6(1)(c)).
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Cookies and tracking
We use essential cookies and local storage to make the Site work and to remember your cookie choice. Analytics and functional cookies are placed only after you have given consent via our cookie banner. Full details, including a breakdown table and browser opt-out instructions, are set out in our Cookie Policy. You can change your preferences at any time from that page.
5. Third-party processors
We use carefully selected service providers who process data on our behalf under written data processing agreements compliant with Article 28 GDPR:
- Web hosting and content delivery — servers located within the European Economic Area that deliver the Site and store server logs.
- Email service provider — to receive and reply to messages sent to our editorial desk.
- Privacy-focused analytics provider — only where you consent, configured with IP truncation and without cross-site tracking.
- Embedded content — Google Fonts and Google Maps (on the contact page) may receive your IP address when content loads. Unsplash serves editorial photography and may log image requests.
Where a provider transfers data outside the EEA, we rely on an adequacy decision of the European Commission, including the EU–US Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses with supplementary measures. We never sell your personal data.
6. Hotels and external websites
Links to hotel websites, booking engines, museums and tourism boards are provided for your convenience. Once you leave our Site, we have no control over how those organisations collect or use your data. Please read the privacy notice of each hotel before submitting a reservation or personal details.
7. Data retention
- Contact form messages and email correspondence: up to 24 months after our last exchange, then deleted or anonymised.
- Server logs: up to 30 days, unless required longer to investigate a security incident.
- Analytics data: stored in aggregated form for up to 26 months.
- Cookie consent records: 12 months, after which we will ask you again.
- Accounting records: 7 years, as required by Belgian law.
8. Your rights under the GDPR
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to: access your personal data; have inaccurate data rectified; request erasure; restrict processing; data portability; object to processing based on legitimate interests; and withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with a supervisory authority. In Belgium this is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.
9. Your rights under the CCPA/CPRA
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to know what personal information we collect, use and disclose; to request deletion; to correct inaccurate information; to opt out of the sale or sharing of personal information; and to not be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioural advertising. You may submit a request using the contact details below; we will verify your identity before responding.
10. How we protect your data
We apply appropriate technical and organisational measures, including HTTPS encryption, access controls limited to editorial staff who need the data, strong authentication on administrative accounts, regular software updates and data minimisation. No transmission over the internet is completely secure, but we work to protect your information and will notify you and the relevant authority of any breach where required by law.
11. Children
The Site is intended for adults planning travel. We do not knowingly collect personal data from children under 16. If you believe a child has contacted us, please let us know and we will delete the information.
12. Data Protection Officer contact
We have appointed a Data Protection Officer to oversee compliance with this policy. To exercise any of your rights or ask a question about privacy, contact:
Data Protection Officer
Jolly Junction Editorial SRL
Rue des Minimes 41, 1000 Brussels, Belgium
Email: [email protected]
We aim to respond to all requests within one month, as required by the GDPR. This period may be extended by two further months for complex requests, in which case we will inform you.
13. Changes to this policy
We may update this Privacy Policy to reflect changes in law, technology or our services. The "Last updated" date at the top indicates the latest revision. Material changes will be highlighted on the Site.